Cross-site Scripting pimcore

pimcore version 10.3.0 and prior is vulnerable to cross-site scripting...